$ rpki-client -vvf repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft File: D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft (raw, json) Hash identifier: swnltxEWNgV6XkM/AVGrrekrYG6PeIP29VqP48gYaD0= Subject key identifier: D6:5E:63:75:43:0B:EC:D7:58:AE:60:B7:5C:98:7D:31:5B:EC:ED:FD Authority key identifier: D0:DD:54:04:78:1A:BE:E3:CF:6A:74:AD:A8:E9:3F:41:ED:4B:5F:85 Certificate issuer: /CN=D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85 Certificate serial: 68B2E421D8E46CE123BB3B80DE0B97DF47FE7AEE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft Manifest number: 80 Signing time: Sat 12 Apr 2025 03:21:42 +0000 Manifest this update: Sat 12 Apr 2025 03:16:42 +0000 Manifest next update: Tue 15 Apr 2025 13:55:42 +0000 Files and hashes: 1: 3135372e36362e3235302e302f32332d3234203d3e20313532373635.roa (hash: Hz/P540tQCAD7Joj9Cnl8/Cvk9mtd9SX29+QidTIXjo=) 2: D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.crl (hash: Ihqw4yToyyZcmTCVHFR7x9i0jWUG4MdFM0pGiyzouSo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.crl rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 12:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:b2:e4:21:d8:e4:6c:e1:23:bb:3b:80:de:0b:97:df:47:fe:7a:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85 Validity Not Before: Apr 12 03:16:42 2025 GMT Not After : Apr 15 13:55:42 2025 GMT Subject: CN=D65E6375430BECD758AE60B75C987D315BECEDFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:65:0d:6c:30:a5:b0:b9:ce:0d:cd:a5:62:c8: 15:8f:cb:2e:89:b0:ca:a0:f8:d1:8a:93:d0:54:73: 58:ff:b1:bf:9f:3e:b0:2b:0c:db:b2:6a:e8:fe:0f: 4a:55:66:e6:27:2c:cc:35:d7:da:d2:a3:88:72:82: 3e:8c:9f:c4:5d:51:a2:03:a1:be:9a:46:ae:5b:97: d4:8e:9d:ad:6e:5e:f4:08:18:5f:44:b5:ef:b0:90: 66:7f:33:bf:c8:b8:9a:29:2b:55:2a:f0:0d:94:75: 2a:dd:d9:60:08:c5:dd:e5:7e:2d:d7:8c:fc:47:cd: 3f:79:6f:fa:6d:6f:4f:31:51:29:79:03:33:22:97: 40:d2:c3:de:d2:ba:95:32:75:1b:aa:dc:46:a0:c5: 4a:3d:56:d4:8f:68:52:4d:54:82:f1:af:08:a6:62: b4:a6:6c:3e:a1:93:d4:1f:85:ca:fd:bb:08:c1:3e: 0c:32:9d:db:f4:a4:2b:94:91:81:5e:42:0f:0b:ce: e8:13:d5:de:44:33:1e:e0:c4:e5:d4:c5:fe:f6:1f: 1e:ec:b0:71:88:a7:d4:21:0c:c4:69:5b:b5:8f:07: e9:ff:78:e7:96:d5:1d:6a:9d:42:57:0a:d4:3f:d8: 33:c1:fa:e4:11:64:f3:ff:bb:06:0f:a2:6a:59:52: 83:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:5E:63:75:43:0B:EC:D7:58:AE:60:B7:5C:98:7D:31:5B:EC:ED:FD X509v3 Authority Key Identifier: keyid:D0:DD:54:04:78:1A:BE:E3:CF:6A:74:AD:A8:E9:3F:41:ED:4B:5F:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:f7:5c:89:fb:56:6f:75:98:5c:34:55:f1:c3:3d:c3:6a:62: 2d:81:ba:d4:06:2e:bd:06:45:40:61:45:53:d3:39:f7:76:49: 35:9f:ab:61:d7:39:1e:f1:ee:ba:9e:0e:ce:57:ec:8d:63:9f: 07:54:99:63:54:4e:9b:a8:94:1f:7a:6d:92:74:a3:cd:b2:59: 67:73:08:a0:75:62:84:85:42:52:1e:e4:56:65:ba:7e:5d:ba: d8:37:91:e6:33:c5:0f:76:99:c6:17:5f:da:1b:a4:13:ab:05: cd:b8:97:ed:bb:34:1c:12:81:85:e6:63:4e:c7:28:32:7d:51: 51:02:e2:c6:f5:2b:3c:a4:d0:b0:4d:d9:28:e3:d6:a5:49:c7: 47:a0:84:2a:a7:6e:71:8e:6b:53:4f:99:fa:bb:26:b4:dd:99: da:74:be:c8:93:b2:39:ea:53:6a:27:5a:12:53:b7:0c:56:0f: 4f:a6:f9:7c:22:ef:ef:24:4e:2c:92:e0:7b:b4:e5:6d:27:25: 56:d9:73:03:04:ce:04:e5:c0:29:1f:ee:02:3d:1a:5e:5f:4b: ac:81:17:73:a6:e1:8e:2a:d5:6e:bf:67:87:ce:53:a5:29:10: 4a:a8:53:19:03:fb:64:89:63:74:20:aa:c1:0d:8c:41:e8:5c: 94:63:64:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaLLkIdjkbOEjuzuA3guX30f+eu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBERDU0MDQ3ODFBQkVFM0NGNkE3NEFEQThFOTNGNDFF RDRCNUY4NTAeFw0yNTA0MTIwMzE2NDJaFw0yNTA0MTUxMzU1NDJaMDMxMTAvBgNV BAMTKEQ2NUU2Mzc1NDMwQkVDRDc1OEFFNjBCNzVDOTg3RDMxNUJFQ0VERkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtZQ1sMKWwuc4NzaViyBWPyy6J sMqg+NGKk9BUc1j/sb+fPrArDNuyauj+D0pVZuYnLMw119rSo4hygj6Mn8RdUaID ob6aRq5bl9SOna1uXvQIGF9Ete+wkGZ/M7/IuJopK1Uq8A2UdSrd2WAIxd3lfi3X jPxHzT95b/ptb08xUSl5AzMil0DSw97SupUydRuq3EagxUo9VtSPaFJNVILxrwim YrSmbD6hk9Qfhcr9uwjBPgwyndv0pCuUkYFeQg8LzugT1d5EMx7gxOXUxf72Hx7s sHGIp9QhDMRpW7WPB+n/eOeW1R1qnUJXCtQ/2DPB+uQRZPP/uwYPompZUoOhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1l5jdUML7NdYrmC3XJh9MVvs7f0wHwYDVR0j BBgwFoAU0N1UBHgavuPPanStqOk/Qe1LX4UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTJiZjg2My1hMWYwLTQyZDAtOWUzYS0zZjlmZjY5YTJkMTUvMC9EMERENTQwNDc4 MUFCRUUzQ0Y2QTc0QURBOEU5M0Y0MUVENEI1Rjg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDBERDU0MDQ3ODFBQkVFM0NGNkE3NEFEQThFOTNGNDFFRDRC NUY4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjEyYmY4NjMtYTFmMC00MmQwLTll M2EtM2Y5ZmY2OWEyZDE1LzAvRDBERDU0MDQ3ODFBQkVFM0NGNkE3NEFEQThFOTNG NDFFRDRCNUY4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIn3XIn7Vm91mFw0VfHDPcNqYi2ButQGLr0G RUBhRVPTOfd2STWfq2HXOR7x7rqeDs5X7I1jnwdUmWNUTpuolB96bZJ0o82yWWdz CKB1YoSFQlIe5FZlun5dutg3keYzxQ92mcYXX9obpBOrBc24l+27NBwSgYXmY07H KDJ9UVEC4sb1Kzyk0LBN2Sjj1qVJx0eghCqnbnGOa1NPmfq7JrTdmdp0vsiTsjnq U2onWhJTtwxWD0+m+Xwi7+8kTiyS4Hu05W0nJVbZcwMEzgTlwCkf7gI9Gl5fS6yB F3Om4Y4q1W6/Z4fOU6UpEEqoUxkD+2SJY3QgqsENjEHoXJRjZOs= -----END CERTIFICATE-----Generated at Sun Apr 13 07:29:51 2025 by rpki-client